pentaho-platform icon indicating copy to clipboard operation
pentaho-platform copied to clipboard

Published 20 hours ago • verified publisher icon pentaho

Batik 1.9.1 vulnerability (CVE-2020-11987) in kettle-core

Open mariusssi opened this issue 2 years ago • 0 comments

I have this CVE reported in my application for about 1 year (on 9.3.0.0-428). https://github.com/advisories/GHSA-2h63-qp69-fwvw (High Severity) Would need batik 1.14+

Wanted to upgrade but it's the same version in latest: See also https://mvnrepository.com/artifact/pentaho-kettle/kettle-core/9.4.0.0-294

Any reason why this lib didn't get updated until now ? Does it not apply maybe ?

mariusssi avatar Nov 02 '22 10:11 mariusssi